uchiwa
uchiwa copied to clipboard
Uchiwa is a simple yet effective open-source dashboard for the Sensu monitoring framework.
Would it be possible to have the ability to hide some checks from the dashboard while still having them triggering handlers ? This could be done adding a "hide" value...
## Expected Behavior Dependencies should remain up-to-date to address known security vulnerabilities. ## Current Behavior uchiwa-web ships Bootstrap 3.1.1 which is subject to XSS vulnerabilities: * [CVE-2018-14040](https://nvd.nist.gov/vuln/detail/CVE-2018-14040) * [CVE-2018-14041](https://nvd.nist.gov/vuln/detail/CVE-2018-14041) ##...
## Expected Behavior Uchiwa implements a referrer policy to minimize disclosure of URL and other sensitive information in cross-site requests ## Current Behavior Referrer policy is not implemented. ## Possible...
## Expected Behavior Dependencies should remain up-to-date to address known security vulnerabilities. ## Current Behavior uchiwa-web ships Moment.js 2.16.0 which is subject to known vulnerabilities: * [CVE-2017-18214](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18214) * [CWE-400](https://cwe.mitre.org/data/definitions/400.html) ##...
## Expected Behavior Uchiwa supports HTTP Strict Transport Security (HSTS) as a mechanism for protecting against protocol downgrade attacks and cookie hijacking. ## Current Behavior Uchiwa does not implement HSTS...
## Expected Behavior "Last Ok" Date should be referencing the last time the check was ok ## Current Behavior "Last Ok" Date is referencing 01/01/1970 ## Possible Solution ## Steps...
## Expected Behavior Dependencies should remain up-to-date to address potential security vulnerabilities. ## Current Behavior uchiwa-web ships Angular 1.6.10 ## Possible Solution Upgrade to latest 1.7 release ## Context The...
## Expected Behavior Logrotate should be rotating Uchiwa log files. This was reported and fixed in #765 however the fix has been lost. ## Current Behavior Logrotate currently ignores the...
## Expected Behavior Uchiwa should let users know that it's waiting on the initial data set when the daemon is first started. ## Current Behavior Uchiwa shows an error with...
Yesterday one of the blocklists (used by ublock origin) I subscribe to started blocking "ua-parser.min.js" and as a consequence uchiwa started failing to load. It basically simply shows a white...